The Privacy Act 1988 imposes several restrictions on the manner in which organisations deal with the personal information they have gathered about individuals and provides consumers with a tool to protest its misuse. The article discusses the provisions of the Privacy Act together with the ten National Privacy Principles (NPPs) that an organisation must comply with in all its dealings with personal information.